Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/158ca667-fd31-3431-8b27-f1811003df7b.roa
File: 158ca667-fd31-3431-8b27-f1811003df7b.roa (raw, json)
Hash identifier: JcrHVbRelcgbfF3+6if9jrBMXg/9JcXLXSqE2QmyLEg=
Subject key identifier: 51:A5:EF:D7:CD:C4:83:F7:D7:E3:0B:92:27:28:97:9B:5E:6C:65:5B
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328583F5987A95348EC09CB9E481B20
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/158ca667-fd31-3431-8b27-f1811003df7b.roa
Signing time: Fri 23 Sep 2022 12:00:00 +0000
ROA not before: Fri 23 Sep 2022 12:00:00 +0000
ROA not after: Sat 29 Oct 2022 04:00:00 +0000
asID: 8987
IP address blocks: 75.2.0.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:3f:59:87:a9:53:48:ec:09:cb:9e:48:1b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Sep 23 12:00:00 2022 GMT
Not After : Oct 29 04:00:00 2022 GMT
Subject: CN=b04d22bc-4b6d-4938-81d7-823afeac0e5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:9c:ca:4d:61:29:58:d8:28:4b:55:67:2b:
b2:0b:77:25:5a:83:9f:8c:95:f2:c7:80:88:0c:15:
21:6b:bc:47:d0:15:08:9a:fc:4f:9e:fe:8d:5e:b0:
1f:55:1d:f3:6d:17:91:82:15:6c:94:11:02:64:a1:
89:0e:53:6d:d8:9d:7c:e7:11:fa:8c:7d:9f:9a:f2:
8d:ce:ac:af:45:4c:51:a5:68:3c:83:73:66:81:cd:
3e:17:59:8e:e7:6f:2e:e7:3b:a5:8d:75:70:4e:7b:
f8:a2:57:2d:f6:33:02:88:d2:af:f3:d6:d5:b8:8b:
64:96:9c:c5:3a:36:00:34:4f:d8:17:9b:3a:7d:6f:
f1:14:7b:b8:06:24:2e:5b:15:e0:3b:86:fc:f9:76:
99:c1:fd:43:5b:de:78:db:c8:99:26:b0:6e:af:be:
79:35:cb:b9:92:e8:58:10:13:8f:90:0e:4d:94:55:
c5:49:98:e5:56:bc:5e:39:de:d6:91:a7:8b:e0:29:
9f:fb:50:00:c1:17:59:91:75:65:a0:4c:c2:d6:6f:
bc:11:a5:ca:7c:b8:e6:92:5e:e1:9d:88:27:b6:e5:
9b:4f:99:23:0c:9a:bb:f3:93:6f:40:bc:c1:2b:56:
84:c7:e8:41:8a:35:2d:43:0a:56:35:e2:5e:4f:12:
b0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A5:EF:D7:CD:C4:83:F7:D7:E3:0B:92:27:28:97:9B:5E:6C:65:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/158ca667-fd31-3431-8b27-f1811003df7b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
75.2.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:66:f8:e1:49:d4:26:8b:ee:14:1d:bc:22:88:3c:15:67:88:
ba:e4:a4:29:7f:80:2c:f4:60:6f:49:d1:91:10:46:c3:65:d0:
c5:83:45:65:76:fb:df:ed:57:f9:ac:24:71:18:d1:af:ce:cf:
af:0a:2d:13:91:9c:86:d1:14:09:57:51:fc:bb:a1:db:0f:4d:
2f:f7:cc:2e:d3:12:60:90:47:98:f4:1f:77:ab:86:7e:21:bf:
e7:29:60:79:8f:31:f4:9d:a0:17:83:18:81:9e:c7:15:8a:3b:
de:01:d2:fd:5e:e8:16:0f:bd:bb:1a:db:31:02:3b:d8:09:76:
2a:5d:a8:89:5a:75:d8:f3:2d:d8:13:af:87:eb:ce:b4:ff:51:
18:16:20:d9:11:5e:4f:58:e6:89:ad:82:a2:ac:f7:03:77:43:
17:58:b3:40:1d:84:ed:66:07:38:e2:26:fc:2c:b7:62:32:2d:
9b:87:94:7b:88:1b:3d:28:24:62:0a:80:e3:f6:d4:4d:ee:88:
d9:93:b1:0a:6d:19:d0:9f:ae:fe:d6:42:34:e1:2c:86:99:37:
f7:de:69:85:a6:91:e6:66:fc:20:da:67:06:db:49:fb:b4:88:
32:75:d9:7e:a6:2c:7e:38:9e:e2:9f:37:3f:ba:39:18:f4:2b:
56:97:f9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:54 2025 by rpki-client